Re: Write-only devices (Was read only devices)

[casper () holland Sun COM (Casper Dik)]

> Here's a thought.....don't log it unless its a valid username.  If its a
> valid username, and they're failing a lot, then you know what they're
> targetting...if its an invalid username, it doesnt' matter...could be a
> password, could be anything, but its not a valid user, so you don't need
> to worry about it.


I think you should log more than just valid usernames.  In logging code
I wrote once I logged all usernames that had one of the following
characteristics:
        - existing user
        - only alpha numeric characters, starting with an alpha

While that may still log passwords, it only logs weak passwords.

Casper